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DESCRIPTICasr 

APPARATUS OF A EIEXIBLE MD CCMMON lEMP SYSTEM 
FOR MPEG-2 CONTENT DISTRIBUTIC3N MD PROTECTION 

5 

Technical Field 

The present invention relates to content distribution 
and protection in MEEG-2 scope, especially to such applications 
where the protected content based on MPEG-2 is consumed by different 
10 lEMP terminal, and the same content is protected by different lEMP 
system. 

Background Art 

Content distribution is becoming more and more demanding 

15 as multimedia data and contents can reach anywhere and anytime. 
Users are happy with the convenience and flexibility, and they can 
enjoy entertainment easily and efficiently. On the other hand, 
content owners are worried about the illegal usage of their property. 
There is a balance between two sides. 

20 There are a lot of protection techniques for protecting 

the content, such as data encryption, watermarking, etc. They have 
been iicplemented in many content distribution applications. It seems 
different system enploys different kinds of mechanisms and 
protection techniques to distribute content with protection. All the 

25 terminals or content consuming devices in that case are only able to 
play and consume the content that is provided by the same content 
provider. They cannot exchange their terminal or device to playback 
different contents. 

In MPEG-4 context, a standardisation group has been 

30 working on MPEG-4 IHyEP Extension. The solution is able to achieve 
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bot±i of- the following: 

1. Allow t±Le ■ same protected content to be consumed on 
different vendors' MPEG-4 lEMP Terminals. This will be fully enabled. 

2. Allow the same content to be protected by different 
5 vendors' lEMP Tools. This will be assisted to as large extent as 

possible. 

In MPEG-2 context, there is a CA (Conditional Access) 
system that defines a minituum set of common CA elements necessary to 
achieve interoperability between different CA systems. However, 
10 there is no real inter-operability here, as not enough coitponents 
are defined, and the architecture offered by CA is not flexible 
enough. 

It is very difficult to produce the same terminal to 
play different MPEG-2 contents provided by different content 
15 providers in such case. In other words the same protected MPEG-2 
content cannot be played back in different CA system.. 

On the other hand, CA system defines a coraBnon scrambling 
algorithm, this makes hardware iirplementation siitple, however, this 
makes the whole architecture too rigid. lEMP tool should not be 
20 fixed to certain tool beforehand, it should allow more flexibility 
for vendors to choose their favourite tool in their lEMP system. In 
such case it is necessary to define some standard way and interface 
to provide both better flexibility and security at the same time. 

Hence, a flexible and interoperable lEXIP system is 
25 needed in MPEG-2 system for content protection. 

To define a flexible and interoperable lEMP system 
structure for MPEG-2 to allow: 

1. The same protected MPEG-2 content to be consumed on 
different vendors' MPEG-2 lEbdP Terminals. This will be fully enabled. 
30 2. The same MPEG-2 content to be protected by different 
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vendors' IBMP Tools. This will be assisted to as large extent -as' 
possible. 

To provide the standard way for lEMP. system iitplementers 
to build the whole lEMP system for MEEG-2 from encoder, channel 
5 distribution, to terminal in a secure manner; 



Disclosure of Invention 

To solve the problem, MPEG-4 lEMP Extension can be 
mapped to MPEG-2 with some modifications. 
10 lEMP Control Information needs to put inside the content 

to describe what are the IRIP tools needed to play the content, and 
how they protect the content. It includes lEMP Tool List and lEMP 
Tool Container. 

The lEMP Tool List supports indication of independent or 
15 alternative Tools. For each tool in the lEMP Tool List, the 
following information is provided: 

, 1. • lEMP Tool Identifier: A given lEMP tool is identified to 
other entities via its lEMP Tool Identifier, ■ and an optional 
Parametric Description; 
20 2. Possible alternatives to a given Tool; and 

3. Optional Tool List Signature. 

The lEMP Tool Container carries the binary tool itself 
in the content. One implementation of a given tool is carried as 
the payload of one lEMP Tool Container, the representation format, 
25 packaging information and lEMP Tool ID of which is specified in the 
container also. 

lEMP Control Graph describes the association between 
different elementary streams under different programs and different 
lEMP tools, at the control point at which the lEMP tool should be 
30 running. 
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The IFMP Tool Manager is ■ a conceptual entity in a given 
lEMP Terminal. I^on receipt of the Tool List, the Terminal should 
route the same to the IPMP Tool Manager- for parsing and Tool 
retrieval. The Tool Manager also processes parametric descriptions, 
5 resolves alternative tools, and receives binary Tools that arrive in 
the Content. 

All lEMP Tool Messages are routed through the Terminal. 
To represent this function, an entity called the Message Router (MR) 
is defined in the architecture. The MR connects and cattiraunicates 
10 • with supported lEMP Tool(s). It thus abstracts the physical 
interface of one lEMP Tool from any other lEMP Tool that wishes to 
conmunicate with it. Message Routing is assumed to be instantaneous. 

<Cperation of Invention> 

15 On the content provider side, a media content is encoded 

using existing coding technology like MPEG-2 or MPEG-4, and 
encrypted using existing lEMP tool like DES or AES. The content 
maybe entiedded with watermarks using a Watermark Tool AAA. (for 
example) before the encoding. The media content is then multiplexed 

20 using MEEG2 system. 

At the same time, lEMP Control Information needs to be 
built up, that includes lEMP Tool List and an optional Tool 
Container, The lEMP Control Information is put in PSI in MPEG-2 
transport stream, and a special PES packet in MPEG-2 program stream. 

25 lEMP Tool List is also generated based on the lEMP Tools 

used in protecting the content. The lEMP Tools List includes lEMP 
Tool ID specifying a unique tool. It can also includes optional 
parametric description to allow the terminal to choose their own 
preferred tool that does the same function (for exanple, DES), and 

30 it may also includes a set of alternative tools so that the terminal 
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can choose among a set of known tools that can, acconplish the same 
task. 

lEMP Control Graph is also built diaring content 
generation. For exairple, if DES tool is used to encr\^t video 
5 elementary stream 0x01 after encoding, then, in the control graph, 
there needs to be an indication that DES tool is used to protect 
elementary stream 0x01, and it should be called at whidi control 
point (before decoding) . If Watermark Tool AftA is used to insert 
watermark into audio elementary stream 0x02 before encoding, then, 

10 in the control graph, there needs to be an indication that Watermark 
Tool AAA needs to be called upon- elementary stream 0x02 at which 
control point (after decoding) . 

On the terminal side, lEMP Tools List is passed to the 
lEMP Tool Manager module sitting inside MPEG-2 terminal. The Tool 

15 Manager checks whether all tools needed to consume the content are 
present in the terminal, if there is one missing, the terminal 
follows, a proprietary way to retrieve the missing lEMP Tool 
according to the liMP Tool ID or parametric description. The 
obtained lEMP Tools are now available in the terminal, and they are 

2 0 stored in the lEMP terminal to be ready for use with the pre-defined 
messaging interface. 

The lEMP Control Graph is also parsed by the terminal, 
so that the terminal knows which lEMP Tool to invoke upon which 
elementary stream at which control point. 

25 The content stream is then continuing to pass through 

content decoder, necessary lEMP tools are called upon, and the 
content can be decoded and played back to the terminal . 

<Effective of Invention> 
30 This invention solves the problem to play back the same 
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protected MPEG-2 content by different types of terminals, as well as 
to protect the same MPEG-2 content using different vendors' lEMP 
systeta, by introducing the MPEG-2 lEMP framework. 

lEMP Control Information can be carried in PSI for MPEG- 
5 2 transport stream, or in PES packet for MEEG-2 program stream. The 
liMP Control Information carries IPMP Tool List, or lEMP Tool 
Container in the 'form of five new descriptors. 

The IPMP Tool List identifies, and enables selection of, 
the lEMP Tools required to process the Content. lEMP Control Graph 
10 indicates the association between lEMP tools and their protection 
scope (control point) . Tool Container carries the binary tool in the 
content stream. 

IPMP Stream is the elementary stream within MPEG-2 
system, to carry lEMP messages to each individual lEMP tool 
15 , instances, 

lEMP Tool Manager and Message Router can be mapped from 
MPEG-4 IPMP Extension to MPEG-2 IPMP system. 

Brief Description of Drawings 
20 Figure 1 shows Content Distribution and Protection in 

different CA System, for MPEG-2 as the prior art. 

Figure 2 shows General Diagram for a Coirpliant MPEG-2 

lEMP System. 

Figure 3 shows a Diagram of MPEG-2 IPMP Tenninal, in 
25. which "DB" denotes a decoder buffer and "KB" denotes a render buffer. 

Best Mode for Carrying Out the Invention 

. Existing CA system in MPEG-2 does not provide an 
interoperable and flexible content protection mechanism for both the 
30 content owners and terminal vendors. 
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The Figure 1 shows the prior art for the current typical 

CA system. 

Content Owner in unit 1.0 provides contents through 
different content providers X, Y, and Z in unit 1.1,. 1.4, and 1.7. 
5 Different CA. system is used to protect the content for different 
content provider as shown in unit 1.2, 1.5, 1.8. 

Therefore Content Decoding or Content Consuirption 
terminal is also different from each other, as shown in unit 1.3, 
1.6,- and 1.9. 

10 It is clear that MPEG-2 content protected by CA. system A 

can't be played out on terminals that support CA. system B, also 
there is no catplete specification on how different CA systems from 
different vendors are to protect the same content, and how the 
terminal gets to know that. 

15 In this invention, we define a MPEG-2 lEMP system, 

1) to carry lEMP Control Information including Tool List and 
Tool Container in the stream to indicate which lEMP Tools is used by 
content providers and content distributors, and how binary tool 
should be carried inside the content. 

20 2) to define 5 new descriptors in MPEG-2 system to hold Tool 

List, lEMP Control Graph, lEMP Tool Container. 

3) to define 2 new streams. lEMP Stream to carry lEMP 
information that is to be sent to each individual tool instance, and 
lEMP Control Information Stream to carry IFMP Control Information in 

25 Transport Stream. 

4) to map the concept of Tool Manager, Message Router from 
MPEG-4 IPMP extension into MPEG-2 terminal. 

The general diagram in Figure 2 is shown for our 
presented cortpliant MPEG-2 lEMP system. 
30 Server is shown in module 2.1, it works as either 
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Content Provider or Content distributor,, or both functions for 
different application scenario. 

Network layer is shorn in module 2.3 for cararaunication 
between Conpliant MPEG-2 IHyiP terminal and Server including 
5 transmission of content stream from the server to the terminal. 

At first, Right Authentication in module 2.4 starts to 
interact with the server, to obtain the content access and 
consuitption right, as well as the detail usage rule. If the right 
for content access is authorized in Module 2.4, the server will send 
10 the requested content stream to the terminal via the Network layer. 

In module 2.2, Content stream is transmitted together 
with lEMP Control Information including Tool List and Tool Container, 
and lEMP Stream. The details of lEMP Control Information and lEMP 
Stream will be explained later. 
15 lEMP Tools Manager shown in Module 2.5 is to 

parse/ interpret lEMP Control Information. It parses the Tool List 
. and finds out what are the lEMP tools needed to ptocess the content. 
If there is any missing tool, the Tool Manager either retrieves the 
tool from the Tool Container or it retrieves the tool from somewhere 
20 else through a proprietary way. The Tool Manager is also 
responsible to select tool from a list of alternative choices,, or to 
interpret the pcirametric description and choose its own favourite 
tool. 

lEMP Tool Manager also parses the lEMP Control Graph to 
25 find out which tool is used upon which elementary stream at which 
control point. Details of this will be explained later. 

The Licence/ key, and Usage Rules are stored in the 
memory of the terminal as module 2.6 for further process. The binary 
lEMP Tools with their corresponding ToolIDs are stored in the memory 
30 of the terminal as module 2.7. Each of the Tools is built following 
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the generic and standardised Interface and it is pre-ccsnpiled losing 
aie conpiler for matching the platform. For exanple, the Tool of 
Data encryption and decryption can be built based on one generic and 
specified Interface. It can be pre-conpiled into Java Byte Code 
5 (OBC) for all the platforms/terminals with Java Virtual Machine, and 
it is also can be pre-cortpiled into Dynamic Link Library (DLL) for 
Windows based platf onns/terminals . 

Module 2.8 shows the Messaging Interfaces of lEMP Tools 
that are needed to be pre-defined for lEMP Tool providers and 
10 Terminal inplementers to follow. 

The detail explanation is split into four parts here, to 
indicate each invented item. 

(1. lEMP Control Information) 

lEMP Control .Information needs to be carried in the 
content stream. lEMP Control Information contains necessary 
information like Tool List and Tool Container. The lEMP Tool List 
identifies, and enables selection of, the lEMP Tools required to 
process the Content. Tool Container enables the carriage of binary 
tool in content streams. 

In short, the lEMP Control Information describes what 
are the imP tools needed to play the content, and how they protect 
the content. In Transport stream, it exists in the form of lEMP 
Control Information table. In Program Stream, it exists in the form 
of a PES packet when the stream_id is lEMP Control Information 
Stream ID. 

(1.1 lEMP Control Info Table in Transport Stream) 

An additional table ''lEMP Control Information Table" 
should be included in PSI (Program Specific Information) . This is 



20 
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used to hold IPMP control information including Tool Container and 
lEMP Tool List Descriptor that will be defined later on. The PID 
assignment is illustrated as below. 



Table 1 — Program specific infonration 



Structu3re ^aine 


Stream Type 


Reserved 
PID 4 


Description 


Program 

Association Table 


irU-T Rec. 
H222,0|]SO/IEC 


0x00 


Associates Program 
Number and Program 
Map Table PID 


Program Map Table 


nU-T Rfic. 
H22Z0I BO/EC 
13818-1 


Assigned in 
the PAT 


Specifies PID values 
for coEcponents of one 
or more programs 


Network 

Information Table 


Private 


Assigned in 
the PAT 


Physical network 
parameters such as ECM 
frequencies, 
Transponder Nuiribers, 
etc. 


IHyiP Control 
Information' Table 


irU-T Rec. 
H222.0I BO/EC 
13818-1 


0x03 


Contains lEMP Tool 
List to describe the 
leiP tools and how 
they protect the 
content . 


Conditional 
Access Table . 


nU-T Rec. 
H222,0| BO/EC 
13818-1 


0x01 


Associates one or more 
(private) EMM streams 
each with a unique PID 
value 



5 

(1.1.1 Mapping of lEMP Control Information table into sections) 

The IPMP Control Information table may be segmented into 
one or more sections, before insertion into Transport Stream packets, 
10 with the following syntax. 
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njable 2— IHyiP Contxol Information Table section 



Syntax 


No. of Mnenonic 
bits 


lEMP Control_Info section. () { 






table Id 


8 


uiinsbf 


section_synta3c_indicator 


1 


bslbf 


'0' 


j_ 


bslbf 


xeserved 


2 


bslbf 


section length 


12 


uimsbf 


reserved 


2 


bslbf 


iprap control info version 


5 




current nesct indicator 


1 


bslbf 


section nuniber 


8 


uiinsbf 


last section niziiber 


8 


uiinsbf 


descriptor length 


24 


uimsbf 


for (i=0; i<N/i++) { 






descriptor ( ) 

} 






isSigned 


1 


bslbf 


reserved 


7 


bslbf 


if (isSigned) 






Signature 


8 


l^te^^rraY 


NumCerts 


8 


uimsbf 


for (1=0; i<numCerts;i++) { 






CertTM^e 


8 


uiinsbf 


Certificate 


8 


Byteftrray 


} 

Verifying Tool ID 

1 


128 


uimsbf 


CRC 32 


32 


rpchof 


} 







(Semantic definition of fields In TPMP Control Information Table 
section) 

table_id — This is an 8 bit field, which shall be always set 
5 to 0x02 as shown in- table 1 above . 

section_syntax_ihdicator — The section_syntax_indicator is a 
1 bit field which shall be set to ' 1 ' ; 

section_length ■-- This is a 20 bit field. It specifies the 
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number of bytes of the sec±ion starting immediately following the 
section_length field, and including the CRC. The value in this field 
shall not exceed 1048573. The length is set to be a large value, 
because the following descriptors may . contain 
5 Tool_Container_Descriptor that will be described later. 

iprrp_control_info_version — This 5 bit field is the version 
number of the whole lEMP Control Information Table. The version 
number shall be incremented by 1 modulo 32 when a change . in the 
information carried within the ipitp control info table occurs. When 
10 the current_next_indicator is set to '1', then the version_huitiber 
shall be that of the currently applicable lEMP Control Information 
Table. When the current_next_indicator is set to '0', then the 
versionjiuniber shall be that of the next applicable IHyc Control 
Information Table. 

15 current_next_indicator — A 1 bit indicator, which when set to 

'1' indicates that the lEMP Control Information Table sent is 
currently applicable. When the bit is set to '0', it indicates that 
the liMP Control Information Table sent is not yet applicable and 
shall be the next lEMP Control Information Table to become valid. 

20 section_number — This 8 bit field gives the number of this 

section. The sectionjauniber of the first section in the lEMP Control 
Information Table shall be 0x00. It shall be incremented ' by 1 modulo 
256 with each additional section in the lEMP Control Information 
Table. 

25 last_section_nur±)er ~ This 8 bit field specifies the nu3±)er 

of the last section (that is, the section with the highest 
sectionjaurtiber) of the IPMP Control Information Table. 

descriptor_length - This 16 bit field specifies the total 
length of the descriptors immediately following this field. 

30 ToolList_Descriptor should be following this field. Details of the 
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descriptors are given in section 3. 

isSigned - This 1 bit field indicates the presence of a 
signature in the lEMP Control Information table. 

Signature - The signature of the entire lEMP Control 
5 Information including Tool List descriptor and Tool Container 
descriptor. 

, CertType - The type of certification mechanism being used. 
NumCerts - The number of certificates included. 
Certificate — The array of certificates. 
10 Verifying_Tool_Id - The ID of 'the Tool that is required to 

verify the certificate (s) . This may be the ID of the Terminal. 

CRC_32 ~ This is a 32 bit field that contains the CRC value 
that gives a zero output of the registers in the decoder defined in 
Jtanex B in [1] after processing the entire IBIP section. 

15 

(1.2 lEMP Control Information in Program Stream) 

lEMP Control Info provides overall lEMP Information 
including Tool List Descriptor in Program Stream. It is presented as 
a PES packet when the streamjLd value is specified value. 



20 
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Table 3-IEMP Control 3nf onnation 



Syntax 


No. of 






bits 




IEMP_control_info() { 






packet start code prefix 


24 


bslbf 


map stream id 


8 


uiinsbf 


lptnp_aontroljLnfo_length 


19 


uiiiisbf 


ciicrent_nextjLndicator 


1 


JDSlbf 


iFiiE>j3ontrol_info_versicai 


5 


uiinsbf 


reserved 


7 


bslbf 


Tnarker_bi1i 


16 


bslbf 


desariptor_length 


16 


uimsbf 


for (i=0; i<N;i++) { 






descriptor 0 

} 






isSigned 


1 


.bslbf 


reserved 


7 


bslbf 


i'f (isSigned) 


Signature 


8 


^teArray 


NurnCerts 


8 


uimsbf 


for (i=0; i<numCerts;i++) { 


CertType 


8 


uimsbf 


Certificate 


8 


ByteArraQf 


} 


Verifying Tool ID 


128 


uimsbf 


} 


CRC 32 

} 


32 


rpdhof 



(Semantic Definition of fields in lEMP Control Info) 

packet_start_code_prefix — The packet_start_code_prefix is a 
24-bit code. Together with the irBp_streaia_id that follows it 
5 constitutes a packet start code that identifies the beginning of a 
packet. The packet_start_code_prefix is the bit string '0000 0000 
0000 0000 0000 0001' (0x000001 in hexadecimal) 

inap_stream_id — This is an 8 bit field whose value is always 
• Ox?? in hexadecimal. 
10 iprtp_control_info_version — This 5 bit field is the version 
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number of the whole lEMP Control Information. The version number 
shall be incremented by 1 modulo 32 when a change' in- the information 
carried within the iptip control info occurs. When the 
current_next_indicator is set to ' 1 ' , then the' versionjiuniber shall 
5 be that of the currently ai>plicable lEMP Control Information. When 
the currentjiext_indicator is set to '0', then the version_number 
shall be that of the next applicable lEMP Control Information. 

ip[rp_control_info_length — The ipiip_control_info_length is a 
19 bit field indicating the total nuiriber of bytes in the 
10 ipitp_control_info immediately following this . field. The maximum 
value of the field is 524288 (bytes) . 

current_next_indicator — A 1 bit field, which when set to '1' 
indicates that the lEMP Control Info sent is currently applicable. 
When the bit is set to '0', it indicates that the lEMP Control Info 
15 sent is not yet applicable and shall be the next one to become valid. 

ipi[p_control_info_version ~ This 5 bit field is the version 
nunOaer of the whole lEMP Control Info. The version nuiriber shall be 
incremented by 1 modiiLo 32 whenever the definition of the lEMP 
Control Info changes. When the current_next_indicator is set to '1', 
20 then the iprcp_control_info_version shall be that of the currently 
applicable lEMP Control Info. When the current_next_indicator is set 
to ' 0 ' , then the ipiip_control_info_version shall be that of the next 
applicable IHyiP Control Info. 

descriptor_length ~ The descriptor_length is a 16 bit field 
25 indicating the total length of the descriptors immediately following 
this field. ToolList_Descriptor should be following this field. 
Details of the descriptors are given in section 3. 

■marker_bit — A markerjoit is a 1 bit field that has the value 

'1' . 

30 isSigned - This 1 bit field indicates the presence of a 
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signature in the lEMP Control Information table. The following 
fields in the if bracket bears the same semantics as in the last 
section. 

5 (2. New Descriptors) 

Program and program element descriptors are structures 
which may be used to extend the definitions of programs and program 
elements. All descriptors have a format which begins with an 8 bit 
tag value. The tag value is followed by an 8 bit descriptor length 
10 and data fields. The invention defines new lEMP Tool List Descriptor 
to hold the lEMP tool list,- IBdP Control Graph Descriptor to 
represent the overall lEMP structure, and lEMP Tool Container 
Descriptor to carry binary IBMP tool inside the content. 

The following semantics apply to both descriptors 
15 defined in this invention as well as the existing descriptors in 
MPEG-2. 

descriptor_tag ~ The descriptor_tag is an 8 bit field which 
identifies each descriptor. Its meaning is given in the following 
table. An 'X' in the TS or PS columns indicates the applicability 
20 of the descriptor to either the Transport Stream or Program Stream 
respectively. Five new descriptors are introduced in this invention. 
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gram 




rcsgram element descriptors 


descriptor tag 


TS 


■ps 


identification 


0 


n/a 


n/a 


ResBirved. 


1 


n/a 


n/a 


Reserved 


■ ^ 






video_stiream_descriptor 








audio_stream_descriptor 


4 


X 


X 


hiejrajrdhy descciptoiir 


19 


X 


X 


IHyiP Tool List Descriptor 


20 


X 


X 


IHyiP Tool Information Descriptor 


21 


X 


X 


lEMP Parametric Descriptor 


22 


X 


X 


lEMP Tool Container Descriptor 


23 


X 


X 


lEMP Descriptor 


24-63 


n/a 


n/a 


ITU-T Rec. H. 222.0 | ISO/IEC 








13818-1 Reserved 


64-255 


n/a 


n/a 


User Private 



descriptor_length — The descriptor_length is an 8 bit field 
specifying the n-umber of bytes of the descriptor itiitaediately 
following descriptor_length field. 

5 

(2.1 lEMP Tool List Descriptor) 

The lEMP Tool List Descriptor includes a list of lEMP 
tools. It is used to specify all lEMP tools that should be used in 
order to play back the content. 



10 
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Table 5 - lEMP Tool list descriptor 



Syntax 


No. of 

M-ts . 


^toenonic 


IEMPToolList_descriptor ( ) { 






descriptor tag 


. 8 


uimsbf 


descariptor _J.ength 


16 


uimsbf 


numTools 


8 


uitnsbf 


for ( 1=0; i<numTools; i++) { 






IpipTool Descriptor 0 

} 

} 







IpirpTool_Descriptor{) is defined in the following section. 

(2.2 lEMP Tool Descriptor) 

5 IPMP_Tool_Descriptor contains information for a logical 

lEMP Tool required by the Terminal, The logical tool may be one of 
the following: 

1. A vendor-specific IBMS Tool specified by lEMPJToolID, 

2. One of a list of alternate 'IHyiP Tools, 

10 3. An lEMP Tool specified by a parametric description. 
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Table 6 - lEMP Tool Info descriptor 



Syntax 


No. of 
bits 


^fo€icvonic 


IHyDPTooljdescriptor 0 { 






descriptor tag 


8 


uimsbf 


descriptor_length 


16 


uimsbf 


isAltiGraup 


1 


uimsbf 


isParametric 


1 


uimsbf 


Reserved (Obllllll) 


6 


uimsbf 


IEMPjrool_ID 


128 


uimsbf 


if (isMtGroup) ,{ 






numAltematives 


8 


uimsbf 


for (1=0; i< nuinAltematives;i++) { 






Alt lEMP Tool ID 

} 


128 


uimsbf 


} 

else if ( isParametric ) { 






paxantetricDescription 

} 

} 




ByteArray 



(Semantic definition of fields in lEMP Tool descriptor) 

In the case of a list of alternate tools, the Tenainal 
shall select an lEMP Tool from the list of alternate lEMP Tools. In 
5 the case of a parametric description of the IMP Tool, the Terminal 
shall select an IFMP Tool that meets the criteria specified in the 
■ parametric description. 

IHy[P_ToolID - the identifier of the logical lEMP Tool required . 
pY the Terminal. 

10 isAltGroup - IEMP_Tool contains a list of alternate lEMP Tools. 

In this case, IEMP_ToolID is an identifier for the list of alternate 
IHyiP Tools, and the Terminal shall route information specified in 
the bitstream for IEMP_ToolID to the specific lEMP Tool instantiated 
by the Terminal. 

15 nimiAltemates - the number of alternate lEMP Tools specified 
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in IEMP_Tool[] . 

Alt_IEMP_ToolIDs - an array of the IDs of alternate IBdP 
Tools that can allow consinption of the content. 

isParametric - IEMP_Tool contains a parametric description of 
5 an I,EMP Tool. In this case, lEMPJToolID is an identifier for the 
parametrically described lEMP Tool, and the Terminal shall route 
information specified in the bitstream for IEMP_ToolID to the 
specific lEMP Tool instantiated by the terminal. 

10 (2.3 lEMP Tool Container Descriptor) 

There are many cases whereby content itself carried the 
binary lEMP- tool (light weighted) . The terminal may retrieve the 
lEMP tool from the content, load it, instantiate it and imm.ediately 
use it in order to play out the content. 

15 In MPEG-4 lEMP extension, binary lEMP tools are carried 

in tool ES. HowevBr, in MPEG-2 context, it could be easier to carry 
the binary lEMP tool inside a newly defined lEMP Tool Container 
Descriptor. One implementation of a given tool is carried as the 
payload of one lEMP Tool Container, the representation format, 

20 packaging information and lEMP Tool ID of which is also specified in 
the container. 
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"Table 7 — IJMP Tool Container desaciptor 



Syntax 


No. of 


l^enonic 




bite 




IEMPToolContainer_descriptor() { . 






descadptorjtag 


8 


uimsbf 


descriptor JLeigth 


16 


uimsbf 


IHMP Tool ID 


128 


uimsbf 


Tool_Foi3iatJED 


32 


uimsbf 


Tool_EaGfcage_ID 


16 


uimsbf 


sizeofTool 


16 


uimsbf 


for ( 1=0/ i<sizeofTool; i++) { 






Toolboc^ 

} 

} 


8 


uimsbf 



(Semantic definitions of fields in lEMP Tool Container Descriptor) 
IBilP_Tool_ID - the ID of the Tool carried in this stream. 
Tool_Fomat_ID - This is defined as 0x0001 for a structurally 
5 described tool. Otherwise, the Tool-_Format_ID indicates the Binary 
Representation of the Tool and is ned by a registration authority. 

Note: A structurally described tool iicplies a description of 
the IHXIP Tool in terms of a network of primitives that can be 
combined to provide some or all lEMP functionalities required for 
10 content cpnsmtption. ' For example, a EES decryption algorithm could 
be described as a sequence of opcodes calls receiving the ciphertext 
as input and providing the plaintext as output. 

Tool_Package_Id indicates the details of the package of 
the Tool ~ exanples are C?ffl or a Winzip self-install executable. 
15 Values are assigned by a registration authority. 

(2.4 lEMP Control Graph Descriptor) 

lEMP Control Graph descriptor contains description of 
the entire lEMP protection scheme. It associates lEMP tool with each 
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individual stream under its protection. 



tehle 8 - IHdP Control Gtaph descsriptor 



Syntax 


No. of 
bits 


Mienonic 


IIMKMrciGfc^hjiesci^jfDiO { 






descsriptorjtag 


8 


uimsbf 


descriptor JLonyUn 






numE>rotectedProgranis 


8 


iximsbf 


if ( numProtec±edPrograins>0 ) { 






prcgramjniuniber 


16 


uimsbf 


nattiProtec±edStreains 


8 


uimsbf 


-for ( i==0; i<niimStreains; i++) { 






streamjiype 


8 


uimsbf 


reserved 


3 


uimsbf 


elenentary_PID 


13 


uimsbf 


ipn^j^JLength 


16 


uimsbf 


for' ( i=0; 'i< N;, i++) { 






■ IIMP Descriptor 

} 

} 






} 

else if (nuinProtectedPrograins=0) { 






nurriProtectedStreams 


8 


uimsbf 


for { i=0; 






i<numProtectedStreaitis; i++) { 






stream_t3i?pe 


8 


uimsbf 


eleientary_strearti id 


8 


uimsbf 


ipfrp_length 


16 


tumsbf 


for ( i=0; K N; i++) { 






lEMP Descriptor 

} 

} 

} 

} 







(Semantic Definition of fields in lEMP Control Graph Descriptor) 

numProtectedPrograms - This 8 bit fields indicates how many 
programs are under lEMP protection scope. If the number is 0, it 
means it is a program stream. If it is greater than 0, it means it 
is a transport stream, and a for loop follows to trace into each 
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program. 

Transport Stream Case (numProtectedPrograms > 0) : 

programjiumber ~ Program_nuiriber is a 16 bit field. It 
5 specifies the program that is under protection by TEMP. This field 
shall not take any single value more than once within one version of 
the lEMP Control Infonnation. 

ip!np_length — This is a 16 bit field. It specifies the number 
of . bytes of the lEMP . descriptors immediately following the 
10 ipiip_length field. 

NumProtectedStreams - Specifies number of elementary streams 
(belonging to the above program) that are under the protection by 
IBdP. 

stream_type ~ This is an 8 bit field specifying the type of 
15 program element carried within the packets with the PID whose value 
is specified by the ele[nentary_PID. The values of stream_type are 
specified in table 11 described later. 

elenientary_PlD ~ This is a 13 bit field specifying the PID of 
the Transport Stream packets whicii .carry the associated program 
20 element. If there is a lEMP Descriptor following immediately after 
this elementary_PID, it means that this particiiLar elementary stream 
is under the protection scope defined by this imP Descriptor. 

Program Stream Case (numProtectedPrograms = 0) : 
25 elementary_str6am_id ~ The elementary_stream_id is an 8 bit 

field indicating the value of the stream_id field in the PES packet 
headers of PES packets in which this elementary stream is stored. 

lEMP Descriptor is further defined below. 

30 
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(2.5 lEMP Descriptor) 

IHyiP Descriptor specifies the IHyEP protection at a 
particular scope. Including specification of control points, 
sequencing, lEMP tool IDs, etc. 



Table 9 — lEMP Descriptor 



Syntax 


No. of 


Miomonia 




bits 




IM_descrptatO{ 






descriptor_tag 


8 


uimsbf 


descsriptor lengtii 


8 


uiinsbf 


lEMPJDescriptorlD 


8 


uimsbf 


lIMP ToolID 


128 


uimsbf 


ntunControlPoints 


8 


uimsbf 


for ( i=0; KnumControlPoints; 






i++) { 






oontrolPoint 


8 


uimsbf 


reserved 


6 


uimsbf 


seqoenceCode 


2 


uimsbf 


if 






( sequenceCode===Oxl ) { 






lE^ DescriptorlD 


8 


uimsbf 


controlPoint 


8 


uimsbf 


} 

if 






( seqaenceCodeF=0x2 ) { 






lEMPJDescsciptiorlD 


8 


uimsbf 


controlPoint 


8 


uimsbf 


} 

CpaqueData 

} 




ByteArray 



5 

(Semantic Definitions of Fields in lEMP Descriptor) 

IEMP_DescriptorID - a unique ID of this lEMP descriptor. This 
could be used to refer to this particular descriptor (protection 
scope) . 

10 IEMP_ToolID - Unique ID of the lEMP Tool that is protecting in 

this scope. 
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NumCoiitrolPoints - number of Control points at whicih the lEMP 
Tool is active. 

controlPoint - value specifying the lEMP control point at 



which the lEMP Tool resides, and is one' of the following values: 



Control 
Itoint 


Despription 


0x00 


No control point. 


0x01 


Control Point between the decode buffer and the 
decoder . 


0x02 


Control Point between the decoder and the 
CQirposition buffer. 


0x03 


Control Point between the composition buff er and 
the corrpositor. 



5 sequenceCode - value specifying the relation of the IPMP Tool 

to lEMP Tool (s) residing at the same control point, and is one of 
the following. If the sequenceCode is either 0x01 or 0x02,- a .IPMP 
Descriptor ID together with a controlPoint follows immediately, to 
specify which tool (instance) is this current IPMP tool preceding or 
10 following. 



Sequence Code 


Descoription 


0x00 


irMP Tool is not sequenced 


0x01 . 


IPMP Tool precedes another 
tool 


0x02 


lEMP Tool follows another tool 


■ 0x03 . 


A logical ^OR" of 0x01 and 
0x02 



OpaqiieData — opaque data to control the lEMP Tool. 
(3 New Streams) 

Stream_id specifies the type and number of the 
15 elementary stream as defined by the table below. Stream_id 1111 1001 
is assigned to IPMP Stream in this embodiment. 
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liable 10 — Streamld assignments 



stTgHin jLoL 


,^ stream coding 


1011 1100 


program_streain_inap 


1011 1101 


private_stream_l 


1011 1110 


padding_stream 


1011 nil 


private_str,eam_2 


llOx xxxx- 


ISO/IEC 13818-3 or ISO/IEC 11172- 




3 audio 




stiTssici nuiribsz* x xxxx 


1110 xxxx 


ITU-T Rec. H.262 | ISO/IEC 13818- 




2 or ISO/IEC 11172-2 video stream 




number xxxx 


nil 0000 


ECM_stream 


nil 0001 


EMM_stream 


nil 1001 


ancillary_streaiti (lEMP Stream) 


nil 1100 ... nil 


reserved data stream 


1110 




nil nil 


program stream directory 



Table 11 — Stream tj^pe assignments 



Value 


Desaription 


0x00 


ITU-T 1 ISO/IEC Reserved 


0x01 


ISO/IEC 11172 Video 


0x02 


ITU-T Rec. H.262 | ISO/IEC 13818- 
2 Video or ISO/IEC 11172-2 
constrained parameter video 
stream 


0x03 


ISO/IEC 11172 Audio 


0x04 


ISO/IEC 13818-3 Audio 






OxOF 


lEMP Stream 


0xll-0x7F 


ITU-T Rec. H. 222.0 | ISO/IEC 
13818-1 Reserved 


OxBO-OxFF 


User Private 
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(3.1 lEMP Stream) 

The IHyiP stream is a new elementary stream that is to 
carry lEMP information, thlike MPEG-4 ITMP extension, where there 
can be many IHyiP Elementary steams in one content, with each lEMP ES 
5 associated with one lEMP system, in MEEG-2, all lEMP information for 
all lEMP tools sitting on all control points are carried in a single 
IHyiP Stream. 

Hence, there is a need to indicate the clear destination 
in every piece of lEMP information in lEMP Stream. 
10 It is defined in this invention that lEMP Stream should 

be a concatenation of lEMP info messages, with the syntax defined 
below: 



OJable 12 - lEMP Info' Message 



Syntax 


No. of Mianonic 




bits 


IHyiP_info_message ( ) { 




iprpjiescriptor id 


8 xumsbf 


C!ontrol_point 


8 oiimsbf 


lengthjDfmessage 


16 viimsbf 


for ( i=0; i<N; i++) { 




message 

} 

} 


8 Toimsbf 



The ipiip_descriptor_id and controljpoint together 
clearly defines the destination of this IHy[P_inf ojnessage . This 
15 message should be routed by the message router to the lEMP Tool 
defined in the corresponding ipnp descriptor sitting at the 
specified control_point . 



(4 MPEG-2 IFMP Terminal) 
20 lEMP Tool Manager and Message Router can be directly 

mapped from MEEG-,4 lEMP Extension Terminal to MPEG-2 lEMP terminal. 
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Figure -3 shows the arcdiitecture of a MPEG-2 lEMP 

terminal. 

(4.1 IBMP Tool' Manager) 
5 The lEMP Tool Manager is a conceptual entity in a given 

lEMP Terminal. Upon receipt of the Tool List, the Terminal should 
route the same to the IFMP Tool Manager for parsing and Tool 
retrieval.' The Tool Manager also processes parametric descriptions, 
resolves alternative tools, and receives binary Tools that arrive in 
10 the Content. 

The following steps detail the process of parsing and 
retreival of Tools in an MPEG-2 Terminal . 

1. The lEMP Tool -List Descriptor arrives in the lEMP Control 
Information Table in PSI and is routed to the Tool Manager. 
15 2. The lEMP Tool Manager parses information for the IPMP Tools 

as per the syntax in clause 2.2.2.1. 

3. The Tool Manager checks if the required Tools are available. 
For each unavailable Tool, an attettpt to obtain the Tool may be madei 
How to obtain the missing tool is an irtplementation issue. 
20 4. The lEMP Tool Manager is also responsible for parsing the 

lEMP Tool Container Descriptor and retrieving the binary lEMP Tool 
that is carried inside PSI. 

5. The IPMP Tool Manager is further responsible for resolving 
parametric descriptions. 

25 

(4.2 IPMP Message Router) 

All IBiP Tool Messages are routed through the Terminal. 
To represent this function, an entity called the Message Router is 
defined in the architecture. The MR connects and communicates with 
30 supported IPMP Tool(s) . It thus abstracts the physical interface of 
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one lEMP Tool from any other IIMP Tool that wishes to cointmiQicate 
with it. Message Routing is assumed to be instantaneous. In case of 
an MR error, an appropriate error status is returned by the MR. In 
all other cases, the MR is required to route, without a change in 
5 semantic meaning, information and responses as received. 

Messaging interface can be mapped from MPEG-4 lEMP 
Extension without modification. However, there is no need to define 
a context ID for tool instances under MPEG-2. IH^EP Descriptor ID 
together with control point should clearly define a specific tool 
10 • instance tunning at a specific control point protecting a specific 
elonentary stream. 

(4.3 Mutual Authentication) 

Tools that must comraunciate with one another or with the 
15 Terminal must do so in a way that meets the security requirements of 
the Tools and the Terminal. Tools must establish trust with the 
Terminal and possibly with one another to enable secure 
comraunication. Support for the establishment of a communication 
channel that reflects the nature of inter-tool trust can be 
20 acconplished via the use of secure, trusted authenticated channels. 

Messages supporting the mutual authentication can be 
directly mapped from MPEG-4 IHyiP extension to MPEG-2 framework. 

Although the present invention has been described in 
25 connection with ■ specified embodiments thereof, many other 
modifications, corrections and applications are apparent to those 
skilled in the art. Therefore, the present invention is not limited 
by the disclosure provided herein but llmted only to the scope of 
the appended claims. 
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CLAIMS 

1. Apparatus of a flexible and comnon IHSIP System for MPEG- 
2 content distribution and protection on content provider side, 

5 corcprising: 

encoder that encodes a ' content using existing coding 
■tec±nology into a content stream; 

encrypter that encrypts the encoded content stream using 
at least one lEMP tool; 
1 0 section that creates liMP ■ Tool List of at least one lEMP 

tool used for encrypting the encoded content; 

■ section that creates lEMP Control Graph that indicates 
how the at least one lEMP tool protects the stream; 

section that itiultiplexes lEMP Control infoiitiation 
15 including lEMP Tool List into lEMP Control Information Table for 
transport stream, or into lEMP Control Information EES packet for 
program stream; and 

section that multiplexes lEMP Control information table 
inn the case of the transport stream and lEMP control informaiton 
20 PES packet in the case of the program stream with the content stream 
using MPEG-2 system. 

2. The apparatus according to claim 1, further corcprising 
watermark section -that embeds watermark information in the content 

25 using existing watermarking tool. 

3. The apparatus according to claim 1, further comprising 
section that creates TEMP Tool Container to carry binary tools in 
the content stream. 
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4. The apparatus accorcJing to claim 1, further coitprising: 
section that creates lEMP stream to carry time variant 

lEMP related information that is to be sent to eada individual tool 
instance during content consunption. at terminal side; and 
5 section that multiplexes the lESydP stream into MPEG-2 

content stream. 

5. i^paratias of a flexible and common lEMP system for MEEG- 
2 content distribution and protection on MEEG-2 lEMP tenninal side, 

10 conprising: 

de-multiplexer that de-multiplexes IHyiP Control. 
Information including lEMP Tool List from MEEG-2 content stream sent 
from a content provider; 

section that interprets lEMP Tool List; 
15 section that retrieves missing lEMP tool based on the 

IH^ilP Tool List from local ' (either pre-loaded or pre-coded) , 
peripheral or remote side; 

section that interpretes lEMP . Control Graph and 
obtaining information which tool controls which stream at which 
■20 control point; and 

section that interacts with at least one TMB tool 
through pre-defined (messaging) interface at the control point. 



6. The apparatus according to claim 5, further cortprising 

25 section that performs dt least one of watermark retrieving and 
watermark embedding, through pre-defined (messaging) interface at 
the control point. 



7, The apparatus according' to claim 6, further conprising 

30 section that interprets parametric description of lEMP Tool List and 
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altem9.tive tools to make a tool selection based on the 
interpretation result. 

8. The apparatus according to claim 5, further coir¥)rising 

5 section that interprets parametric description of IHUP • 

Tool ..List and alternative tools to, make a tool selection based on 
the interpretation result, and 

section that retrieves iDinary IH4P Tools from IHSIP Tool 
Container within ISMP Control Information to obtain the associated 
10 Tool ID, Tool Format ID and Tool Package ID of each lEMP Tool. 

9. The apparatus according to claim 5, further coiiprising 
router that routs time variant lEMP related message to a specific 
lEMP Tool instance or the terminal itself. 

15 

10. The apparatus according to claim 5, further conprising 
section that irtplements some existing and cammonly used lEMP tools 
in an embedded MPEG-2 lEMP terminal. 

20 11. The apparatus according to claim 5, wherein the MPEG-2 

content stream contains ISMP related streams including lEMP Control 
Information stream and lEMP stream, and the lEMP Control Information 
stream includes lEMP Tool List and IHXIP Tool Container. 

25 12. The apparatus according to claim 5, wherein MPEG-2 

content streams are protected by lEMP tools, and contain information 
of lEMP tools such as Tool ID, Tool Location, Tool List and Tool 
Control Graph. 

30 13. The apparatus according to claim 5, wherein MPEG-2 
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content streams are protected by IMP tools, and some of the lEMP 
tools are carried in the content streams by a defined lEMP Tool 
container. 

5 ' 14 . The apparatus according to claim 5, wherein MEEG-2 

content streams are protected by a few lEMP tools, and some missing 
lEMP tools in the terminal can be retrieved frcm a specified 
location. 

10 15. The apparatus according to claim 5, wherein MPEG-2 

content streams are protected by a few lEMP tools, and the lEMP 
tools are pre-implemented in the terminal. 

16. The apparatus according to claim 5, wherein a protected 
15 MPEG-2 stream is processed first by using lEMP information which is 

carried in the same MPEG-2 stream, such as lEMP Tool List, IHIP 
Control Graph, lEMP Tool Container, and lEMP stream. 

17. The apparatus according to claim 5, wherein a protected 
20 MPEG-2 stream is processed first by interpreting lEMP Control 

Information which is carried in the same MPEG-2 stream, parsing lEMP 
Tool List, interpreting lEMP Control Graph, retrieving missing tools, 
applying associated lEMP tools to the audio and video streams at the' 
defined control point. 

25 

18. The apparatus according to claim 5, wherein a protected 
MPEG-2 stream is processed first by a conceptual lEMP manager to 
obtain the necessary lEMP Tools and apply them to the associated 
audio and video streams. 
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